Privacy policy

Carbon Value Exchange Privacy Notice

CARBON VALUE EXCHANGE LIMITED is a private limited company whose registered office is 12 Fetter Lane, London, United Kingdom, EC4A 1JP (hereinafter referred to as “Cavex” or the “Company”). Cavex is committed to protecting and respecting the privacy of individuals.

Please read the following carefully to understand how Cavex uses your personal information and for information about your privacy rights.

This Privacy Notice applies to cavex.io and any other Cavex sites, forms, or services, in addition to any event attendance or general interactions with Cavex or its representatives (“Cavex Services ”)

1. What personal information do we collect and process?

The personal information we may collect includes name, email address, employer, job title, business address, telephone number, location or any additional information you elect to provide directly to us.

In providing Cavex Services, we may also log technical information such as you Internet Protocol (IP) address, browser type, cookie information, access times and device type.

2. How do we collect personal information?

We obtain personal information from when you provide it directly to us, for example when you engage with our staff, fill in a form on our website, or use Cavex Services. We also obtain personal information indirectly from you when you visit our websites, including technical information about your device and browsing such as IP address and your interactions with the sites, and via cookies.

We may also receive information about you from third parties, for example from one of our commercial partner organizations, or from individuals or third party organisations who share our goals and may introduce you to us. We also receive some personal information about you when you use social logins (see section 4 below).

We may collect your information from publicly available sources, such as your organisation’s or employer’s website (for example, your business contact details including your email address). Depending on your privacy settings for social media services, we may access information from those accounts or services, including from LinkedIn, Facebook, Instagram and X (“Twitter”).

In general, we may combine your personal information from these different sources to use in accordance with purposes listed in this Privacy Notice.

3. How and why do we use this personal information?

We may use your personal information in a number of ways, including:

• to provide you with services or information that you have requested and to communicate with you in general;
• to facilitate your, or your organization’s, participation in Cavex’s network or one of our programs and/ or events – and to administer those programs and events;
• to provide you with information about third-party events, work and other services that we think may be of interest to you;
• to analyse and improve our work, including our services and activities and to report on the impact and effectiveness of our work;
• for administration purposes including to create an account for you if you register with us; to notify you about changes to Cavex Services; to keep Cavex Services safe and secure; and to ensure that content is presented in the most effective manner;
• for company administration purposes including to satisfy legal obligations which are binding on us (e.g. in relation to tax and law enforcement bodies), for the prevention of fraud or misuse of services, and for the establishment, defence and/ or enforcement of legal claims;
• We may provide you separately with specific further information about our use of your personal information (for example if you apply to work at Cavex). Also, if we anticipate processing your information in a way that could reasonably be considered outside of what you could reasonably expect, then we will notify you in advance, obtain your consent, where appropriate, or refrain from processing your information in the new way.

4. Social logins

Some Cavex Services may enable you to register or log-in to your account through a third-party platform such as Google or LinkedIn. When you do so, the third-party platform will share some of your (basic account) personal information with us, such as the name and email address you use for your third-party account. We use this personal information to identify you when you log-in and allow you to access Cavex Services.

We do not require you to use social log-ins – if you prefer, you can always register or log-in using your email address and creating a Cavex account. You can also un-link your Google or LinkedIn account from your Cavex account by updating your settings/ preferences with Google or LinkedIn respectively:

• How to un-link your account from Google
• How to un-link your account from Linkedin

5. What is our lawful basis for using your personal information?

The General Data Protection Regulation (GDPR) requires us to rely on one or more lawful basis to process your personal information. The following are relevant to us:

• Where you give consent (for example, to receive our newsletter).
• We have entered into a contractual arrangement or taken steps at your request prior to entering into one (with you).
• Where necessary to comply with a legal obligation to which we are subject.
• Where there is a legitimate interest in us doing so provided our use is fair, balanced and does not unduly impact your rights and freedoms – in general, Cavex’s legitimate interests are aimed at furthering our goals and delivering for customers (for example, company governance and reporting, delivering services and programs, and networking).
• If you are under eighteen, please ensure you have the consent of your parent or guardian to share your personal information with Cavex.

6. Do we share your personal information with anyone else?

We provide your information to our contractors, suppliers and partners who provide services on our behalf, or with whom we collaborate, to the extent necessary to enable us to provide you Cavex Services – provided we are satisfied that they provide sufficient guarantees in respect of safeguarding your personal information and privacy rights, and that we have in place an appropriate agreement with them.

We may also share your information between our Affiliates (described in the introduction to this Notice), in accordance with applicable data protection law and where appropriate to deliver our charitable mission and Cavex Services.

We may also need to disclose your information to local authorities or law enforcement agencies, if required to do so by law, or as expressly permitted under relevant data protection regulations. If we merge or undergo a reorganisation, in doing so we may acquire or transfer personal information as part of that transaction, but your personal information would continue to be used for the same purposes.

7. International Transfers

As an international organization, we will occasionally need to transfer data outside the European Economic Area – including between Cavex’s Affiliates and branch offices but also when we use suppliers and engage with other third parties based outside the European Economic Area. Please note that some countries outside of the EEA may have a lower standard of protection for personal information, including lower security requirements and fewer rights for individuals. In these instances, adequate safeguards, such as European Commission-approved contractual clauses and technical measures, have been put in place to adequately protect personal information.

8. Security

Cavex is committed to keeping your personal information safe and secure. We take appropriate and proportionate measures to ensure that your personal information is kept secure and to prevent its loss, destruction and misuse. We use strict procedure and security features, such as encryption, permission controls, and audit logging, to ensure your data is handled securely. However, you should be aware that the transfer of information over the Internet is not entirely secure and although we will do our best to protect your personal data, we cannot guarantee the security or integrity of any personal information which is transferred online from or to you.

9. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

10. Your privacy rights and choices

If we rely on your consent to use your personal information (for example if you sign up for one of our newsletters and consent to us providing you with marketing information), you can withdraw that consent (including the right to ‘opt–out’ of our using your information for marketing purposes generally) at any time by emailing info@cavex.io or by clicking “Unsubscribe” at the bottom of any marketing email.

You also have the following rights:

• To request from us access to (including a copy of) your personal information.
• To ask us to update your personal information if it is inaccurate (and you can ask us to check if you are unsure)
• To ask us to delete your personal information in some cases.
• To ask us to restrict processing, if there is disagreement about its accuracy or legitimate usage.
• To object to processing where we are (i) relying on the basis of legitimate interests, or (ii) using your personal information for direct marketing or (iii) using your personal information for statistical purposes.
• To data portability in certain circumstances – where we are processing your personal information (i) on the basis of your consent, (ii) because the processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract, and the processing is carried out by automated means, you may ask us to provide it to you or another service provider in a machine-readable format.

To exercise your rights, email info@cavex.io. Please note that these rights are subject to exemptions and may only apply in limited circumstances. We may also ask for additional information to confirm your identity and for security purposes before we are able to comply.

If your data is subject to the GDPR, you have the right to lodge a complaint to the Supervisory Authority in your country, if you believe that we have not complied with the requirements of the GDPR with regards to your personal information (in the UK, for example, this would be the Information Commissioner’s Office, or ICO – www.ico.org.uk/global/contact-us ).

11. How long will we keep your personal information?

In general terms, we will retain your information for as long as necessary to fulfil the purposes for which it was collected and/ or it is used. However, if before that date (i) your personal information is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you validly exercise your right of deletion (please see section 10 above), we will remove it from our records at the relevant time.

Where required, in some cases we will keep personal information at least as long as necessary to comply with relevant regulatory or statutory requirements. We will also retain information, when and as long as necessary, to resolve legal disputes.

12. Changes to this notice

Any changes we may make to this Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Notice.

13. Contact Us

Any questions about this Privacy Notice or the ways in which your information is being used should be addressed to Fabrizia Maschietti or ATTN: CARBON VALUE EXCHANGE LIMITED, 12 Fetter Lane, London, United Kingdom, EC4A 1JP